Chapter Monitoring and Maintaining Print and File Servers Microsoft exam objectives covered in this chapter: ÛÛ Planning for Server Deployment NN Plan File and Print Server Roles May include but is not limited to: virtualization server planning, availability, resilience, and accessibility ÛÛ Planning Application and Data Provisioning NN 93157c06.indd 275 Provisioning Data May include but is not limited to: shared resources, offline data access 8/7/08 10:34:24 PM File and print servers are common in any network One of the great benefits of creating a network is the ability to share resources such as files and printers By sharing the resources centrally on servers, it becomes easier to manage them You can add both a File Services role and a Print Services role to most editions of Windows Server 2008 You can’t add the roles to Web or Itanium editions By adding these roles, you can share both folders and printers, making them accessible to users in the network When you add the File Services role, you can also add features and services For example, you can add the File Server Resource Manager (FSRM) that provides extra tools you can use to create quotas and quota templates, screen for certain files or file types, and create reports You can also add the Distributed File System (DFS) services The DFS Namespaces service allows you to organize shares from multiple servers into a single namespace DFS replication can be used to replicate data to different servers for both redundancy and fault tolerance purposes You’ll notice in the list of objectives that virtualization server planning, availability, resilience, and accessibility are listed for file and print server roles Chapter 2, “Planning Server Deployments,” covers virtualization Chapter 9, “Planning Business Continuity and High Availability,” covers availability and resilience in more depth File Servers File servers are commonly used in corporate environments Simply put, file servers are used to hold files that can be shared among users in the environment You can create home folders that allow users to store their data centrally on a server instead of on a local system With home folders, users have access to their data no matter where they log on in the network One of the great benefits of having users store their data on a central file server is the ability to backups It’s relatively easy to backups on a single file server, but if you need to back up the data on 50 individual user systems, you’re going to have some problems Shares allow users to store and access data on a server On the server itself, the files and folders will be held on an NTFS partition When working with file servers, you should understand what shares are, how to create and access a share, and how to restrict access by manipulating both NTFS and share permissions 93157c06.indd 276 8/7/08 10:34:24 PM File Servers  277 A significant new feature in Windows Server 2008 is the FSRM It includes several tools you can use to control and manage data stored on a file server File Server Resource Manager When you designate a server as a file server, you should add the File Services role using Server Manager Adding this role means you can add services that allow you to manage your file server For example, before you can create shares, your server must have the File Services role added Once you add the role and the FSRM service, you’ll have access to the FSRM tool Exercise 6.1 shows you the steps to add the File Services role and add the FSRM service E x e r c i s e Installing the File Services Role Launch Server Manager by clicking Start  Administrative Tools  Server Manager Click the Add Roles link to launch the Add Roles Wizard On the Before You Begin page, review the information, and click Next On the Server Roles page, select the Files Services role, and click Next On the File Services page, review the information, and click Next On the Select Role Services page, select the check box next to the following services: NN File Server (this should already be checked) NN Distributed File System (including DFS Namespaces and DFS Replication) NN File Server Resource Manager NN Windows Search Service Click Next On the DFS Namespace page, select Create a Namespace Later Using the DFS Manager Click Next Distributed File System (DFS) will be covered later in this chapter On the Configure Storage Usage Monitoring page, ensure that none of the volumes on your system are selected, and click Next (Quotas will be covered later in this chapter.) 10 On the Select Volumes to Index for Windows Search Service page, ensure that none of the volumes on your system are selected, and click Next 93157c06.indd 277 8/7/08 10:34:24 PM 278  Chapter 6    Monitoring and Maintaining Print and File Servers n E x e r c i s e   ( c o n t i n u e d ) 11 On the Confirm Installation Selections page, review the information Your display should look similar to the following image Click Install 12 Once the installation completes, review the results, and click Close You’ll now have access to the FSRM tool in Administrative Tools To launch the FSRM, click Start  Administrative Tools  File Server Resource Manager Figure 6.1 shows the FSRM Notice that you can quota management, file-screening management, and storage reports management in the FSRM Each of these management options has its own node, as shown in Figure 6.1 F i g u r e  ​ File Server Resource Manager  ​ 93157c06.indd 278 8/7/08 10:34:24 PM File Servers  279 Of course, this begs the question, what the heck are these nodes doing? Quota Management  ​ ou can configure quotas to limit how much data a user or group of Y users can store on individual drives or folders Quotas can be soft limits (meaning warnings are issued and notifications sent) or hard limits (where users are restricted from adding any more data) I’ll discuss quota management later in this chapter File Screening Management  ​ ile screens allow you to control the types of files that users F can save and allow you to generate notifications when users attempt to save unauthorized files For example, you can create a file screen to prevent any MP3 files or any scripting files from being saved on a server Storage Reports Management  ​ ou can create storage reports to allow you to identify Y trends in disk usage and monitor any attempts to save unauthorized files You can create reports based on a schedule (such as every Friday night) or as needed While Figure 6.1 shows the FSRM connected to the local computer, you can also use it to connect to remote computers This can be useful if you are managing multiple file servers You can use one tool to manage all the servers remotely To connect to a different server, you simply right-click File Server Resource Manager (Local) and then select Connect to Another Computer The FSRM includes several configurable options that apply to each of the nodes These options are in four property pages You can access the property pages by right-clicking File Server Resource Manager (Local) and selecting Configure Options Figure 6.2 shows the Email Notifications tab of the options F i g u r e  ​ Configuring the FSRM options  ​ 93157c06.indd 279 8/7/08 10:34:25 PM 280  Chapter 6    Monitoring and Maintaining Print and File Servers n The tabs are as follows: Email Notifications  ​ ou can configure the settings in this page to send email notifications Y to a specific user on a specific Simple Mail Transfer Protocol (SMTP) server such as Microsoft Exchange None of the other settings can be configured until you configure at least a default administrator recipient address Although these settings should point to actual servers and recipients, it’s not tested until you click Send Test E-mail In other words, you can enter an imaginary recipient address so that you can access the other property pages Notification Limits  ​ n the notification page, you can configure how often notifications O are sent The default is 60 minutes For example, when a quota is exceeded, an email will be sent to the email address configured on the Email Notifications tab If that were your email address, how often would you want to be notified of the same event? It could be that once an hour is just what you want Or, you may want to change it to once every hours (or 480 minutes) Times can be set for the following notifications: NN Email notifications (how often an email is sent) NN Event log notifications (how often an event log entry is logged) NN NN Command notifications (how often an associated command should be generated in response to the event) Report notifications (how often a report should be generated) Storage Reports  ​ he Storage Reports tab allows you to configure different parameters T for different reports that can be generated The different reports that can be generated (and configured in this tab) are as follows: NN Duplicate Files NN File Screening Audit NN Files by File Group NN Files by Owner NN Large Files NN Least Recently Accessed Files NN Most Recently Accessed Files NN Quota Usage Report Locations  ​ eports have default locations where they are stored This is in the sysR tem drive (usually C:\) by default in the StorageReports folder However, you can change the location to another drive if storage space is a problem or to reduce contention with the operating system on the system drive When preparing for the 70-646 exam, you should know what the FSRM tool is, its capabilities, and how to access the FSRM 93157c06.indd 280 8/7/08 10:34:25 PM File Servers  281 Shares A share in Windows Server 2008 is simply a folder that has been configured to be accessible over the network Any folder can be shared The purpose of creating a share is so that users can access the data over the network You can create shares using Computer Management or Windows Explorer Once a folder is shared, it can be accessed using a universal naming convention (UNC) of \\serverName\shareName Creating Shares Creating shares is relatively easy If you know exactly what you want to and how to it, you can use Windows Explorer If you want to use a wizard to create a share, you can use Server Manager or Computer Management Not everyone can create shares On a local computer, you must be in one of the following groups: NN Local Administrators NN Power Users On a domain controller, you must be in one of the following groups: NN Server Operators NN Administrators NN Domain Admins Remember, you’ll find the Server Operators group only on a domain controller Users added to this group are granted permissions and rights to manage the domain controller, but not the domain In other words, they can perform tasks such as create shares on the domain controller, but they cannot create accounts or groups in Active Directory Domain Services Exercise 6.2 shows you the steps you can follow to create a share using the Provision Share Wizard within Server Manager The Provision Share Wizard allows you to view all the capabilities and options available This exercise assumes you have completed Exercise 6.1 Exercise 6.2 Creating a Share with the Provision Share Wizard Launch Server Manager by clicking Start  Administrative Tools  Server Manager Within Server Manager, browse to Roles  File Services  Share and Storage Management Right-click Share and Storage Management, and select Provision Share 93157c06.indd 281 8/7/08 10:34:25 PM 282  Chapter 6    Monitoring and Maintaining Print and File Servers n E xe rc i s e 2  (continued) On the Shared Folder Location page, click Browse On the Browse for Folder page, select C:\ , and click the New Folder button Name the folder ServerManagerShare Click OK Back on the Shared Folder Location page, click Next On the NTFS Permissions page, you have the opportunity to change the NTFS permissions Click Next to accept the defaults On the Share Protocols page, ensure that the check box for SMB is checked Notice that NFS is dimmed and you can’t select it If you had installed the Services for Network File System (NFS) when you installed the File Services Role, this would be selectable Accept the default share name, and click Next On the SMB Settings page, review the settings, and click Next 10 On the SMB Permissions page, verify that All Users and Groups Have Only Read Access is selected Click Next 11 On the Quota Policy page, verify that Apply Quota is not checked Click Next 12 On the File Screen Policy page, ensure that Apply File Screen is not checked Click Next 13 On the DFS Namespace Publishing page, ensure that nothing is selected, and click Next 14 On the Review Settings and Create Share page, click Create 15 On the Confirmation page, click Close Exercise 6.3 shows you the steps you can follow to create a share using both Computer Management and Windows Explorer tools Notice that you have significantly fewer choices when using these tools This exercise also assumes you have completed Exercise 6.1 Exercise 6.3 Creating Shares with Computer Management and Windows Explorer Launch Computer Management by clicking Start  Administrative Tools  Computer Management In Computer Management, browse to System Tools  Shared Folders  Shares Rightclick Shares, and select New Share This launches the Create a Shared Folder Wizard On the Welcome to the Create a Shared Folder Wizard page, click Next On the Folder Path page, click the Browse button 93157c06.indd 282 8/7/08 10:34:25 PM File Servers  283 E xe rc i s e 3  (continued) In the Browse for Folder dialog box, select the C:\ disk drive, and click the Make New Folder button Rename the folder by entering MyShare Select the MyShare folder, and click OK Back on the Folder Path page, click Next On the Name, Description, and Settings page, accept the default of MyShare for the share name Enter the description of Share created for testing Your display should look like the following image Notice that the share path is identified using the UNC path of \\serverName\shareName or \\MCITP1\MyShare Click Next On the Shared Folder Permissions page, accept the default of All Users Have ReadOnly Access Click Finish On the Sharing Was Successful page, click Finish 10 Open Windows Explorer You can this on some keyboards by pressing the Windows logo key+E 11 In Windows Explorer, browse to the root of C:\ In the right pane, right-click an empty area, and select New  Folder Rename the folder by typing MyShare2 12 Right-click the MyShare2 folder, and select Share 13 Select the drop-down box, and select Everyone Click the Add button Select the dropdown arrow next to the Reader Permission Level for Everyone Your display should look similar to the following image Notice that the Everyone group is granted Reader access, but you can change this to Contributor or Co-owner, or you can remove the group These permissions will be explained in the “Permissions” section 93157c06.indd 283 8/7/08 10:34:25 PM 284  Chapter 6    Monitoring and Maintaining Print and File Servers n E xe rc i s e 3  (continued) 14 Click the Share button Your share will be created with the correct permissions 15 On the Your Folder is Shared page, click Done Accessing Shares Once you’ve created shares, you’ll want to access them The key to understanding how shares are accessed is in the UNC path described earlier The UNC path is in the format of \\serverName\shareName For example, if you created a share named MyShare on a server named MCITP1, you could access the share using the UNC of \\MCITP1\MyShare You can this in most Windows operating systems from the Run line Press Windows log key+R to access the Run line In Windows Server 2008 and Windows Vista, it’s a little easier You can click Start and then start typing in the Start Search text box right below the All Programs menu As you start typing, the system helps you find what is available For example, if you type just the two backslashes (\\), the search menu will show the computers it is aware of in your network You can then click any of the computers to connect and browse the available shares If you type the name of one of these computers followed by another backslash (such as \\mcitp1\), then the system will connect to that computer and show you what shares are available You can see this in Figure 6.3 By selecting any of the shares, you will automatically connect to that share 93157c06.indd 284 8/7/08 10:34:25 PM Distributed File System  313 DFS Replication You can also use DFS to replicate data DFS Replication performs as a multimaster replication service that can be used to keep data folders synchronized Multimaster replication means that the changes can occur anywhere Consider two servers in two different cities Your goal is to have identical data on both servers so users in both cities can modify the data With DFS replication, it will track all the changes made to the data and ensure that all changes are replicated to each server DFS replication can be used with DFS namespaces or by itself Here are some terms associated with DFS replication: Replication group  ​ set of servers that participates in the replication of one or more repliA cated folders Replicated folder  ​ folder that is replicated between servers in a replication group Any A data change in the folder is replicated to all members in the replication group Member  ​ ny server that is in a DFS replication group is known as a member A Consider Figure 6.24, which illustrates a replication group It has two members (two servers) in the replication group F i g u r e  ​ DFS replication group  ​ Replication Group Specs.xls Member Member Sales.doc Sales Sales Replicated Folders R&D R&D Each server hosts the same two replicated folders: Sales and R&D Whenever a change occurs in a file in one of the folders, the change is replicated to the replicated folder on the other member In the figure, it looks like all the files (specs.xls and sales.doc) are being replicated However, DFS uses the Remote Differential Compression (RDC) protocol to replicate only what has changed in the file instead of the entire files Since the entire file isn’t being replicated, DFS scales well, even when data is traversing slower WAN links 93157c06.indd 313 8/7/08 10:34:31 PM 314  Chapter 6    Monitoring and Maintaining Print and File Servers n Although using DFS to replicate data folders in Windows Server 2008 is similar to how it worked in Windows Server 2003 R2, there are significant differences in how DFS can be implemented to replicate Active Directory Domain Service’s sysvol folder These differences are described in the next section, “FRS and sysvol.” However, when you use DFS in Windows Server 2008 for data replication, you have some significant improvements: NN Improved command-line tools NN Improved search capabilities within a namespace NN Increased scalability NN Better response to unexpected shutdowns NN Improvements in replication performance NN Support for read-only domain controllers DFS is replacing the FRS used in previous editions of Windows FRS and sysvol FRS has historically been used to replicate the sysvol contents You may remember when you promoted a server to a domain controller, the DCPromo tool asked you where you wanted to install the sysvol folder By default, the sysvol folder is stored in C:\Windows\sysvol The sysvol folder holds Group Policy data files and scripts (such as logon and logoff scripts) It’s important that these files are replicated between domain controllers accurately When a user logs onto a computer within a domain, they may hit one domain controller today and another domain controller tomorrow Which domain controller they log on to can be affected by where they’re logging on from, but it’s completely transparent to the user However, no matter which domain controller a user authenticates with, they must still have the same group policies apply and have the same scripts run The only way this can happen is if group policies and scripts are replicated to each domain controller Enter FRS Before Windows Server 2008, FRS was the only method of replicating and synchronizing the sysvol folder between domain controllers when the content changed As long as your domain functional level is less than Windows Server 2008 domain functional level, you are using FRS for sysvol replication You can view your domain functional level by using Active Directory Users and Computers, as shown in Figure 6.25 You can access the screen in Figure 6.25 by launching Active Directory Users and Computers, right-clicking the domain, and selecting Raise Domain Functional Level 93157c06.indd 314 8/7/08 10:34:31 PM Distributed File System  315 F i g u r e  ​ Viewing the domain functional level  ​ Do you remember what it means if your domain functional level is set to Windows Server 2008 as discussed in Chapter 1? Can you support Windows Server 2003 servers in this domain functional level? Yes, you can If you are in Windows Server 2008 domain functional level, it means that all your DOMAIN CONTROLLERS are running a Windows Server 2008 operating system Other servers could be running Windows Server 2000, 2003, or even NT 4.0 The domain functional level is related only to the DOMAIN CONTROLLERS Just because the domain is shown to be in Windows Server 2008 domain function level doesn’t mean that it is using DFS for sysvol replication The choice between FRS and DFS for sysvol replication is made automatically when DCPromo is run: NN NN If the domain functional level is Windows Server 2008 when DCPromo is run, then DFS is used for replication If the domain functional level is less than Windows Server 2008 when DCPromo is run, then FRS is used for replication You can switch from FRS to DFS after promoting a domain to Windows Server 2008 domain functional level However, the procedure is rather complex You would use a command-line tool called dfsrmig.exe which allows you to migrate the sysvol replication from FRS to DFS There is a subtle difference here when DFS is supported for replicating the Active Directory Domain Services sysvol folder and when DFS is supported to replicate regular data content You cannot use DFS to replicate the sysvol folder until the domain functional level is raised to Windows Server 2008 However, DFS is used to replicate data between member servers in a replication group if the servers are running at least Windows Server 2003 R2 93157c06.indd 315 8/7/08 10:34:31 PM 316  Chapter 6    Monitoring and Maintaining Print and File Servers n DFS and WSUS You can replicate any content you desire using DFS While typically you’ll be replicating files and folders that users will use directly, you can also replicate data needed for servers For example, in a large organization you may have multiple Windows Server Update Services (WSUS) servers A single WSUS server would be used to download all the updates and then downstream WSUS servers would retrieve the updates from the first WSUS server To ensure these updates are highly available, you could store the updates on a DFS link and replicate the updates to multiple targets This would ensure that the updates are available to the WSUS servers even if the first WSUS server failed Domain-Based vs Stand-Alone Namespaces When choosing namespaces, you need to decide whether you’ll use a domain-based namespace or a stand-alone namespace: Stand-alone DFS namespace  ​ his is a single server acting as a DFS server A server can T have multiple stand-alone namespaces; however, each stand-alone namespace is stored on only one server Similar to a domain-based DFS namespace, each namespace can have multiple folders, and each folder can have multiple folder targets configured The DFS namespace configuration information is stored locally in the registry of the host server so it provides no fault tolerance within itself However, a stand-alone DFS namespace can be created on a clustered file server The path to the namespace includes the server name, for example, \\MCITP1\Sales Domain-based DFS namespace  ​ domain-based DFS namespace can be hosted on one A or more servers acting as DFS servers Multiple DFS namespace servers are recommended for fault tolerance DFS can include multiple DFS namespace roots and multiple folder targets on different servers In other words, other DFS domain-based DFS namespaces can be added to a domain-based DFS server and appear as though they are all accessible through the single server The DFS namespace configuration information is stored in Active Directory Domain Services, providing a significant level of fault tolerance The namespace configuration information is also stored in a memory cache on each namespace server A server hosting a domain-based DFS namespace cannot be added to a cluster The path to the namespace includes the DNS or NetBIOS domain name, for example, \\mcitpsuccess.com\Sales and \\mcitpsuccess\Sales An added feature in a domainbased DFS namespace is the ability for clients to have preferred targets—this a DFS server a client will use as long as it is operational If the preferred target fails, the client will automatically be referred to another server in the namespace Once the preferred DFS server is restored, the client will fail back to a preferred target Client failback is supported on Windows XP SP2 (with a hotfix) and newer clients including Windows Vista 93157c06.indd 316 8/7/08 10:34:31 PM Distributed File System  317 Any time you want to ensure your data is highly available, consider implementing a domain-based DFS namespace In general, you’ll use a domain-based namespace unless one of the following conditions exists: NN NN You’re not using a domain (Active Directory Domain Services) You want to use a failover cluster Domain-based namespaces will not support cluster configurations Two modes are available if you choose a domain-based namespace: Windows Server 2008 mode  ​ his mode includes additional features and is much more T scalable than Windows Server 2000 mode Whenever possible, it’s recommended to choose this mode Windows Server 2008 mode supports access-based enumeration In other words, users are able to see only the folders they have access to based on permissions To choose this mode, the domain must be in the Windows Server 2008 functional level, and all DFS namespace servers must be running Windows Server 2008 Windows 2000 Server mode  ​ or backward compatibility, you can choose Windows 2000 F Server mode Once the conditions for Windows Server 2008 mode are met, you can migrate to Windows Server 2008 mode Replication Topology When configuring replication among servers in a replication group, you have three choices of how to configure it You will see these choices available in Exercise 6.7 (in the following section) Hub and spoke  ​ he hub and spoke topology has a central server that replicates to other T servers This topology is ideal for environments where you have a central office location (such as a headquarters) and remote offices connected with slower connections For example, consider Figure 6.26 The HQ server is the hub, and it replicates the changes to each of the spokes (the remote offices) With this topology, you don’t need to have connections between each of the remote offices Full mesh  ​ n a full mesh topology, each of the DFS servers replicates to all the other DFS I servers If any of the servers or any of the connections develops a problem, the topology continues to operate You would use a full mesh topology in a well-connected network; you wouldn’t typically use it across WAN connections No topology  ​ hen you choose no topology, you are given the opportunity to design your W own topology This is useful if you have several DFS servers in one well-connected location and some servers located across a WAN connection In this scenario, you can configure a hybrid of the hub and spoke and the full mesh topologies 93157c06.indd 317 8/7/08 10:34:31 PM 318  Chapter 6    Monitoring and Maintaining Print and File Servers n F i g u r e  ​ Hub and spoke topology  ​ Branch Office Branch Office Headquarters Branch Office Branch Office Creating a DFS Replication Group Exercise 6.7 shows you how to create a DFS-based replication group using two member servers You will need at least two member servers to complete this exercise Remember, though, that they don’t have to be real servers You can use Virtual PC to create two servers in two separate instances of Virtual PC Additionally, the File Services role with both the Distributed File System services (DFS Namespaces and DFS Replication) must be installed on both servers This exercise assumes you have completed Exercise 6.1 where you installed the File Services role and Exercise 6.3 where you created the MyShare share E xercise 6.7 Replicating Data with DFS Launch the DFS Management snap-in by clicking Start  Administrative Tools  DFS Management Right-click Replication, and select New Replication Group On the Replication Group Type page, ensure Multipurpose Replication Group is selected, and click Next On the Name and Domain page, enter MCITPStudy as the name of replication group Accept the default domain name Click Next 93157c06.indd 318 8/7/08 10:34:31 PM Distributed File System  319 E xe rc i s e 6.7  (continued) On the Replication Group Members page, add your server and two other servers (If you are using a test environment and don’t have three physical servers, you can create computer accounts in Active Directory Users and Computers and add the three computer accounts as your three servers You won’t be able to see the data transfer, but you will be able to view the configuration of the hub and spoke topology configuration.) Your display will look similar to the following graphic Click Next On the Topology Selection page, ensure Hub and Spoke is selected This topology is ideal when you have a headquarters location and branch office locations Each branch office will replicate only to the headquarters location and will conserve bandwidth Click Next On the Hub Members page, select your server as the hub, and click Add This simulates your server as the server at headquarters Click Next On the Hub and Spoke Connections page, you’ll see the other two servers with your server selected as the required hub Click Next On the Replication Group Schedule and Bandwidth page, click the Replicate During the Specified Days and Times, and click Edit Schedule Notice that you can specify exactly when replication will occur and throttle the bandwidth usage from this page Click Cancel 93157c06.indd 319 8/7/08 10:34:32 PM 320  Chapter 6    Monitoring and Maintaining Print and File Servers n E xe rc i s e 6.7  (continued) 10 Back on the Replication Group Schedule and Bandwidth page, select Replicate Continuously Using the Specified Bandwidth Click Next 11 On the Primary Member page, select the server you are currently working on as the primary member Content will be replicated from here to the other member in your replication group Click Next 12 On the Folders to Replicate page, click Add 13 On the Add Folder to Replicate page, click Browse Select the MyShare folder you created in an earlier exercise, and click OK On the Add Folder to Replicate page, click OK If desired, you can add content to this folder to verify it is being replicated to your second server 14 Back on the Folders to Replicate page, you can select as many folders to replicate as you desire Click Next when you are done 15 On the Local Path of MyShare on Other Members page, select your second server, and click Edit 16 On the Edit page, click Enabled Click Browse 17 On the Browse for Folder page, click Make New Folder Rename the folder MyShare Click OK Your display will look similar to the following image On the Edit page, click OK 18 Back on the Local Path of MyShare on Other Members page, click Next 93157c06.indd 320 8/7/08 10:34:32 PM Distributed File System  321 E xe rc i s e 6.7  (continued) 19 On the Review Settings and Create Replication Group page, review your settings, and click Create The wizard will run Your display should look like the following image indicating success 20 On the Confirmation page, click Close 21 In the Replication Delay message box, click OK 22 Access your second computer, and verify that data from the first computer has replicated to the second computer If you don’t have any data in the source folder, add a file to the folder and then verify it has been replicated If desired, you can play with adding and deleting data from the two folders on the two servers For example, if you add a file in the MyShare folder on MCITP1, you can then look at the folder on MCITP2 and verify the file appears as soon as you press F5 to refresh the screen On MCITP2, you can add a file and verify the file appears on MCITP1 as soon as you press F5 Last, you can verify that file deletions are also replicated If you delete a file on MCITP1, it is almost immediately deleted from MCITP2 If you delete a file on MCITP2, it is almost immediately deleted from MCITP1 Pretty darn cool! 93157c06.indd 321 8/7/08 10:34:32 PM 322  Chapter 6    Monitoring and Maintaining Print and File Servers n SharePoint Services Another way files are frequently shared in networks today is with SharePoint services SharePoint services provides document storage and management capabilities with search, management, administration and deployment features With SharePoint, users are able to access files and resources via a web browser One of the significant benefits with SharePoint is the ability for multiple users to easily share and collaborate files from a central location SharePoint services comes in two primary flavors: Windows SharePoint Services (WSS)  ​ SS is a free download for Windows Server 2008 W The current version is WSS 3.0 WSS is the base service for SharePoint Server products SharePoint Server products  ​ he current SharePoint server is Microsoft Office SharePoint T Server 2007 It is available at an additional cost, similar to how Microsoft SQL Server or Microsoft Exchange Server can be purchased and installed on Windows Server 2008 Microsoft Office SharePoint Server 2007 includes all the base capabilities of WSS 3.0 but you can think of it as a superset of WSS It includes significant additional features and capabilities Microsoft Office SharePoint Server 2007 is typically utilized in larger organizations and enterprises where better scalability is desired Both Windows SharePoint Services and Microsoft Office SharePoint Server 2007 Both products offer the same base features while SharePoint server offers many additional features and better scalability Features supported on both platforms include: NN NN NN NN NN NN NN NN Document collaboration Collaboration tools include the ability to check out documents of multiple types, track major and minor versions, track workflow and more Real-time Presence and Communication Tells users when a user in online Standard Site Templates Templates are included to streamline the process of getting websites up and operational with supported features and services as quick as possible Blogs Users can easily create and maintain their own web logs (blogs) once configured Search Indexing can be enabled on the content to allow users to easily locate any documents Calendars Calendars can be included within pages allowing users to schedule events Task and issue coordination Basic project management capabilities are available Gantt charts can be used to show task relationships and status Additionally you can utilize issue tracking capabilities Surveys Developers can easily add surveys to their websites Surveys can be simple single page surveys or complex multiple page surveys are even surveys that include conditional branching (asking additional questions based on the response to another question) If you want users to be able to easily share files and access them via a web browser, consider either Windows SharePoint services or Microsoft Office SharePoint Server The hardest part is deciding which one meets your needs best 93157c06.indd 322 8/7/08 10:34:32 PM Summary  323 Application Pools SharePoint uses Internet Information Services (IIS) to host the websites In early versions of IIS multiple websites all shared the same application space The result was that when one Web application failed, they all failed Today, Web applications are easily isolated from each other by using application pools Each Web application is contained within its own application pool and runs as an isolated worker process The primary benefit is that when a single Web application fails, none of the other applications are affected You can also control the amount of resources any single website uses SharePoint and WSRM Since a SharePoint server can host multiple web sites, you may want to ensure that any single site doesn’t take too many resources Windows System Resource Manager (WSRM) can be used to restrict resources to specific application pools For example, you may notice that occasionally your SharePoint server experiences very high usage You can create a WSRM policy so that if the server does get exceptionally busy (say over 80 percent utilization), all individual application pools will be restricted to no more than 10 percent of the resources WSRM was discussed in more depth in Chapter 3, “Using Windows Server 2003 Management Tools.” WSRM can be used to manage multiple sites in SharePoint Summary In this chapter, you learned how to configure file and print servers within Windows Server 2008 Windows Server 2008 includes two roles (the File Services role and the Print Services role) to support this functionality Once you add the roles through Server Manager, you can add more role services You learned how to add the File Server Resource Manager and use it to provision shares on a file server You also learned how to add the Print Services role, add and share printers, and publish these printers to Active Directory You learned about Distributed File System and how it can be used to organize data in a single namespace You also learned how DFS can be used to replicate data Last, you learned about SharePoint services and how it can be used to allow users to easily share files accessible via a web browser 93157c06.indd 323 8/7/08 10:34:32 PM 324  Chapter 6    Monitoring and Maintaining Print and File Servers n Exam Essentials Know how to install File Services and Print Services.  ​ ou should be familiar with the Y process of using Server Manager to add these roles Additionally, you should know what services are available under the File Services role Know what the FSRM is and what it does.  ​ he File Server Resource Manager allows you T to manage shares It includes three management tools: quota management, file-screening management, and storage reports management Understand permissions related to shares.  ​ ou should know who can create shares Y (Server Operators, Power Users, and greater) and the available permissions This includes both NTFS permissions and share permissions You should also understand the roles (such as Reader, Contributor, and Co-owner) for shares and how they relate to permissions Understand offline files.  ​ ou should understand the purpose of offline files, how they Y work, and how to configure them on a share For example, you should know that users can access offline files when disconnected, and changes will automatically be synchronized when they log on and reconnect to the network Know the difference between Windows search and indexing.  ​ ou should understand that Y both services are used for searching Indexing is the legacy service included for backward compatibility The Windows search service is the current version of indexing recommended on a Windows Server 2008 server Know how to publish shared printers to Active Directory.  ​ sers may need the capability U to search the network for printers with specific capabilities such as print in color or print double-sided By listing a shared printer in Active Directory (publishing to Active Directory), you can enable this feature Know the purposes and capabilities of DFS  ​ ou should know that DFS can be used to Y ensure data is highly available by replicating content between multiple servers Know the differences between stand-alone and domain-based namespaces In environments with limited bandwidth, you can configure DFS servers in a hub and spoke configuration Understand the differences between DFS and FRS related to the sysvol folder.  ​ ou should Y know when FRS is used to replicate the sysvol folder and when DFS is used DFS is much more efficient and less susceptible to problems when replicating sysvol so should be used whenever possible DFS can be used only when your domain is in Windows Server 2008 domain functional level If the domain was originally in a lesser domain functional level, you must migrate FRS to DFS to change how the sysvol folder is replicated 93157c06.indd 324 8/7/08 10:34:32 PM Review Questions  325 Review Questions Joe is an administrator in a remote office The remote office holds an RODC Joe needs to be able to create shares on the domain controller What group should you add him to so that he can create the shares? A Power Users B Server Operators C Domain Administrators D Local Administrators You have created a share named Sales on a server named MCITP1 You want Sally to be able to modify permissions to files within this share What role would you add her to? A Full Control B Owner C Co-owner D Contributor You have created a share named Sales on a server named MCITP1 You want Sally to be able to create files within the share What role would you add her to? A Reader B Creator-Owner C Modifier D Contributor You have created a share named Sales on a server named MCITP1 You want all the users in the global group named G_Sales to be able to read files within the share What role would you add the group to? A DL_Reader B Read permissions C Reader D Contributor Sally is the CEO of MCITPSuccess.com She uses a laptop with a docking station at work and takes the laptop with her when traveling When traveling, she needs access to her data files that are normally held on a share on the server What can you to give Sally access to her files no matter where she is located? A Configure offline files B Share Sally’s data on the server C Post Sally’s data to an IIS server to make it available D Create a VPN 93157c06.indd 325 8/7/08 10:34:33 PM 326  Chapter 6    Monitoring and Maintaining Print and File Servers n You have implemented offline files on a server share You want to ensure that files are synchronized down to the clients but changes are not synchronized back to the share What should you do? A On the share permissions, assign the Everyone group Deny Write B On the NTFS permissions, assign the Everyone group Deny Write C On the Offline Settings page, select One-Way Caching D On the Offline Settings page, select Optimized for Performance You manage a file server named FS1 You want to restrict the amount of space that users can take within a share named Sales on the server What tool can you use? A WSRM B DFS C WDS D FSRM You have configured disk quotas on a volume on the MCITP1 server with soft limits You want to be notified by email if a user exceeds a limit What tool can you use? A Server Manager B Computer Management C Windows Explorer D FSRM You have shared a printer as clrLaser on a print server named PS1 You want users to be able to search for the printer in Active Directory Domain Services What should you do? A Create a GPO, and apply it to the Printers container B Right-click the printer in Active Directory, and select Enable Searching C Right-click the printer in Print Management, and select Enable Searching D Right-click the printer in Print Management, and select List in Directory 10 You have shared a printer as clrLaser on a printer server named PS1 You notice that the print jobs are quite large, and you’re concerned the space isn’t large enough for the spooler You want to move the spooler from the C:\ drive to the D:\ drive, which has more than 80GB of free space How can you this? A In Print Management, right-click the clrLaser printer, and select Properties Change the location of the spool folder B In Print Management, right-click the PS1 server, and select Properties Change the location of the spool folder C Reinstall the clrLaser printer, and change the location when prompted by the wizard D This can’t be done The spooler must stay on the C:\ drive 93157c06.indd 326 8/7/08 10:34:33 PM Review Questions  327 11 You manage a domain named mcitpsuccess.com It includes several domain controllers that are running Windows Server 2008 One of the DCs was originally running on Windows Server 2003 but was upgraded to Windows Server 2008 this week No other changes to the domain were done You want to use Distributed File System (DFS) for replication of the sysvol folder What should you do? Choose two A Raise the domain functional level to Windows Server 2008 B Raise the forest functional level to Windows Server 2008 C Migrate FRS to DFS D Install the file DFS role 12 You want to install Distributed File System (DFS) on a server to create a domain-based DFS namespace What must be installed before you can install the DFS service? A WSRM B WSUS C WDS D File Services 13 You manage a file server running Windows Server 2008 with the File Services role installed Users run Windows XP and Windows Vista The file server hosts research data that about 100 researchers often search when creating scientific papers However, the searches are frequently slow You are asked whether there’s anything that can be done to improve the searches What should you suggest? A Implement the Windows search service on the server B Implement indexing on the server C Copy the research data onto the client systems D Ask users to limit their searches 14 You have just run DCPromo on a Windows Server 2008 server within a domain with other domain controllers Some of the domain controllers are running Windows Server 2003, and some are running Windows Server 2008 What is being used for replication of group policies and scripts? A DFS B FRS C WDS D WSUS 15 You manage two Windows Server 2008 servers in a medium-sized domain You want to configure the servers so that data folders on one member server are identical to the data folders on another member server What should you configure? A DFS replication B DFS namespace C FRS replication D FRS namespace 93157c06.indd 327 8/7/08 10:34:33 PM ... Windows Server 2008 functional level, and all DFS namespace servers must be running Windows Server 2008 Windows 2000 Server mode  ​ or backward compatibility, you can choose Windows 2000 F Server. .. print server will primarily be a server running Windows Server 2008 93157c06.indd 303 8 /7/ 08 10:34:28 PM 304  Chapter 6    Monitoring and Maintaining Print and File Servers n When running a Windows. .. to Windows Server 2008 However, DFS is used to replicate data between member servers in a replication group if the servers are running at least Windows Server 2003 R2 93157c06.indd 315 8 /7/ 08